5 ms·

I wonder how you can confirm you don't have jailbroken firmware when buying a second hand vehicle.

CogitoCogito 4y ago
I feel like I'd actually would value the blog author's car _more_ after the modifications. Well at the moment it would be either neutral or slightly positive (the author has demonstrated what's possible), but if any extra functionality would be added, I'd be a happy camper.
- fake-name 4y ago
  The author's car (where you presumably have some assurance the firmware on the device is what is claimed? Sure. A random car from a 2nd hand car lot with a mystery custom firmware? Oh hellllllll no. This only add value if you assume there are no bad actors. I'd bet $100 if this becomes common, 2nd hand car lots will sell access to install creepy tracking firmware on all cars that pass through their hands.
  - CogitoCogito 4y ago
    I agree I’d like to made aware of any such changes made by previous owners, but I pretty much consider the makers of the OEM Software as bad actors at this point.
  - Nextgrid 4y ago
    > A random car from a 2nd hand car lot with a mystery custom firmware? Oh hellllllll no. Just like any random car can have a $100 GPS tracker or spy microphone hidden which you won't locate without dismantling the entire car. If someone wants to spy or be nefarious with a car I can think of many easier & cheaper ways than making custom firmware for the radio.
    - tailspin2019 4y ago
      You often connect your phone to this system though, via cable or Bluetooth, so I can see a pretty simple attack vector here to enable being way more nefarious than just GPS tracking…
- InsomniacL 4y ago
  What's stopping me from uploading custom firmware that: exfiltrates private information like contacts, SMS,etc.. sends premium rate SMS's/spam contacts trackers bitcoin miners virus adverts etc...
numpad0 4y ago
For some reasons, PC and iPhones are only class of devices that allows full system reimaging. Not even most Android devices have facilitations for that.
- orangepurple 4y ago
  What is TeamWin TWRP? What is ODIN?
  - yjftsjthsd-h 4y ago
    > What is TeamWin TWRP? What is ODIN? They're great tools that are available for a tiny fraction of devices, usually only after jumping through hoops, thus failing to invalidate the claim >> Not even most Android devices have facilitations for that. (Emphasis mine)
  - jabroni_salad 4y ago
    Back when HTC existed you had to fill out a form with the manufacturer for an unlock before you could use anything like that.
    - GOATS- 4y ago
      Or wait for tools that could unlock your bootloader. Revolutionary S-OFF anyone?
      - numpad0 4y ago
        If you have to wait 6 months for someone two just suddenly show up and tell you to short TP12 to TP21 within 12 seconds from starting patched leaked tool on your PC, that just don't count on so many levels.
        GOATS- 4y ago
        It wasn't like that for the HTC Desire at least, back in 2011 when I rooted mine I simply ran the Revolutionary utility and it was unlocked.

I feel like I'd actually would value the blog author's car _more_ after the modifications. Well at the moment it would be either neutral or slightly positive (the author has demonstrated what's possible), but if any extra functionality would be added, I'd be a happy camper.

fake-name 4y ago
The author's car (where you presumably have some assurance the firmware on the device is what is claimed? Sure. A random car from a 2nd hand car lot with a mystery custom firmware? Oh hellllllll no. This only add value if you assume there are no bad actors. I'd bet $100 if this becomes common, 2nd hand car lots will sell access to install creepy tracking firmware on all cars that pass through their hands.
- CogitoCogito 4y ago
  I agree I’d like to made aware of any such changes made by previous owners, but I pretty much consider the makers of the OEM Software as bad actors at this point.
- Nextgrid 4y ago
  > A random car from a 2nd hand car lot with a mystery custom firmware? Oh hellllllll no. Just like any random car can have a $100 GPS tracker or spy microphone hidden which you won't locate without dismantling the entire car. If someone wants to spy or be nefarious with a car I can think of many easier & cheaper ways than making custom firmware for the radio.
  - tailspin2019 4y ago
    You often connect your phone to this system though, via cable or Bluetooth, so I can see a pretty simple attack vector here to enable being way more nefarious than just GPS tracking…
InsomniacL 4y ago
What's stopping me from uploading custom firmware that: exfiltrates private information like contacts, SMS,etc.. sends premium rate SMS's/spam contacts trackers bitcoin miners virus adverts etc...

numpad0 4y ago

For some reasons, PC and iPhones are only class of devices that allows full system reimaging. Not even most Android devices have facilitations for that.

orangepurple 4y ago
What is TeamWin TWRP? What is ODIN?
- yjftsjthsd-h 4y ago
  > What is TeamWin TWRP? What is ODIN? They're great tools that are available for a tiny fraction of devices, usually only after jumping through hoops, thus failing to invalidate the claim >> Not even most Android devices have facilitations for that. (Emphasis mine)
- jabroni_salad 4y ago
  Back when HTC existed you had to fill out a form with the manufacturer for an unlock before you could use anything like that.
  - GOATS- 4y ago
    Or wait for tools that could unlock your bootloader. Revolutionary S-OFF anyone?
    - numpad0 4y ago
      If you have to wait 6 months for someone two just suddenly show up and tell you to short TP12 to TP21 within 12 seconds from starting patched leaked tool on your PC, that just don't count on so many levels.
      - GOATS- 4y ago
        It wasn't like that for the HTC Desire at least, back in 2011 when I rooted mine I simply ran the Revolutionary utility and it was unlocked.